>  What SSH and FTP packages are available to perform FTP on HP-UX Unix
> to Unix and Windows securely?, pcumming
Unix comes with ssh, and you can get it for Windows. There are also scp
packages available for both. Patrick Santucci recently asked about this very
thing. Maybe he can shed some light on what he learned.

> 1. We would like to provide our customers with a client piece of
> software so that they can log on securely (password not in clear text)
ssh and scp allow for that.

> Note: Some of our customers are running Unix and some Windows.
You could cheat, and run SAMBA for your Windows customers. It wouldn't be
pretty, but it would work. SAMBA can support encrypted passwords.

> We would like some support from a vendor on anything we do.
But no vendor support on SAMBA. There are RFCs for securing FTP, and vendors
working on a secured ftp. I * think * that btrade has a TLS ftp product.
Searching google on TLS ftp yields 50,000 hits. Try
http://www.columbia.edu/kermit/ftpd.html for a page of references. It has
links to an implementation of proftpd, which offers different methods of
authenticating, http://www.proftpd.org/docs/faq/linked/faq-ch7.html.
Bleeding edge. While they do not mention Windows, I believe that there are
Windows clients available that will so authenticate. The columbia.edu site
ends with "For Windows users we can recommend WFTPD Pro
http://www.wftpd.com/ which has support for SSL/TLS beginning with version
3.10".

> Ideally some verification via self generated certificates would be
> helpful but perhaps not do-able or 100% necessary as long as their is
> encryption.
PGP would allow for encryption, but does not solve the password problem. Not
necessarily a bad idea to do both.

> We do not want to add a Windows box due to cost of our
> outsourcer charging us for this.
If their costs are outrageous, next time the contract is up, maybe this
should be a consideration.

Greg Stigers
http://www.cgiusa.com

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *